This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer File: k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer (raw, json) Hash identifier: gSr/cDDpHbV5oR1xp44kuH2IGG6mBE8G2YO7nFWY1EM= Subject key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77589605537D9400F89A567B6C28747C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201884 AS: 210147 AS: 210677 IP: 91.103.248.0/22 IP: 213.109.197.0/24 IP: 2a06:33c0::/29 IP: 2a11:6fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:96:05:53:7d:94:00:f8:9a:56:7b:6c:28:74:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:51:4a:03:e2:5a:96:02:4a:3a:6c:98:09: 2a:90:bc:9b:14:e9:36:0b:73:cf:85:41:7a:38:f6: ab:4b:56:3a:bf:c6:aa:55:24:58:fb:91:65:38:91: f8:30:a2:45:aa:da:76:00:c3:a2:1d:9a:e1:a9:ce: 18:76:9d:db:29:39:d8:32:1d:90:4b:f7:e7:e2:3b: e9:de:0e:eb:b9:32:b6:38:00:4a:c3:d6:6b:33:f3: f4:65:4e:24:c0:1c:08:15:02:56:74:6d:5a:b1:cd: ca:06:94:be:3b:95:4f:ca:b0:38:b6:e7:b1:a5:66: ad:a3:00:5b:25:af:29:16:b9:66:86:13:f8:ff:bd: 71:24:ab:b9:15:d9:a3:8b:67:f5:bb:b4:ea:d1:2a: f8:ec:84:ad:23:9b:ac:33:83:ac:8c:c4:7d:9a:94: 06:69:d6:27:e0:bc:18:d2:57:c6:09:42:eb:d9:a4: d7:bf:34:62:26:e9:ba:bc:84:0a:46:2b:56:bf:cf: a9:80:61:81:44:a6:a7:72:24:f5:b5:e0:62:4c:86: dd:43:f5:8a:90:1f:18:8d:47:4e:ce:61:d2:da:de: d7:24:46:bc:b4:65:10:29:e7:98:1c:4b:45:ad:44: b6:fe:c9:f6:9b:6f:bd:91:b0:e4:93:79:5a:c8:59: 69:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.248.0/22 213.109.197.0/24 IPv6: 2a06:33c0::/29 2a11:6fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201884 210147 210677 Signature Algorithm: sha256WithRSAEncryption 4a:59:25:3b:97:1e:d1:d9:91:4f:d8:98:bf:62:18:3d:c0:f4: bb:3b:1f:3a:22:ff:19:8d:b2:f2:94:2a:be:1b:a4:be:0d:16: 04:e9:aa:6d:a3:d9:cb:dc:e7:d8:98:14:27:32:ce:b7:ed:9a: 40:50:f7:13:7c:04:24:c1:16:fd:85:c4:6d:ae:1b:c5:88:20: 65:99:9c:9a:27:ff:3c:29:50:f2:c7:f2:cf:6c:1e:4e:41:2a: 1c:30:bb:cd:29:11:b2:06:db:c7:b4:99:fb:57:5f:49:2d:41: 73:d3:9c:3f:48:21:ac:c6:0b:0f:0b:07:22:ac:dd:82:36:30: 05:5f:d7:a8:7f:63:d6:c8:3d:ff:ce:f9:14:43:5d:d8:5b:b3: d7:40:9c:54:4f:1f:96:1f:f2:ea:a6:aa:74:f3:6d:86:1c:2f: 29:57:2e:be:da:0b:0b:39:9d:bc:a6:76:e1:56:01:99:07:03: b2:eb:10:fb:88:a3:10:7a:c8:9f:9d:6a:8d:4d:8a:f0:20:1c: d4:fb:b9:50:ec:c4:9f:86:25:a0:c1:bc:c6:82:20:09:0e:2e: c7:dc:ad:52:02:3b:7c:b8:54:a4:80:c3:ed:2e:25:5e:fa:ec: 42:4d:ae:23:a2:fe:4c:e0:50:6a:92:a5:28:e6:0d:00:83:62: 53:7f:cb:43 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt3WJYFU32UAPiaVntsKHR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2E5ODljMTdiMmRhMGM1MTQzMTU1ODIwZWJjNTZiZmU3M2EzYWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ1RSgPiWpYCSjpsmAkqkLybFOk2 C3PPhUF6OParS1Y6v8aqVSRY+5FlOJH4MKJFqtp2AMOiHZrhqc4Ydp3bKTnYMh2Q S/fn4jvp3g7ruTK2OABKw9ZrM/P0ZU4kwBwIFQJWdG1asc3KBpS+O5VPyrA4tuex pWatowBbJa8pFrlmhhP4/71xJKu5Fdmji2f1u7Tq0Sr47IStI5usM4OsjMR9mpQG adYn4LwY0lfGCULr2aTXvzRiJum6vIQKRitWv8+pgGGBRKanciT1teBiTIbdQ/WK kB8YjUdOzmHS2t7XJEa8tGUQKeeYHEtFrUS2/sn2m2+9kbDkk3layFlp+QIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFJOpicF7LaDFFDFVgg68Vr/nOjrfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzFkZTg2 Yy01ZjFlLTQwMmUtOWVmNC02MzdiMjYxYWIxNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvMWRlODZj LTVmMWUtNDAyZS05ZWY0LTYzN2IyNjFhYjE3OS8xL2s2bUp3WHN0b01VVU1WV0NE cnhXdi1jNk90OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCW2f4AwQA1W3FMBQEAgACMA4DBQMqBjPAAwUD KhFvwDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMDFJwCAwM04wIDAzb1MA0GCSqG SIb3DQEBCwUAA4IBAQBKWSU7lx7R2ZFP2Ji/Yhg9wPS7Ox86Iv8ZjbLylCq+G6S+ DRYE6apto9nL3OfYmBQnMs637ZpAUPcTfAQkwRb9hcRtrhvFiCBlmZyaJ/88KVDy x/LPbB5OQSocMLvNKRGyBtvHtJn7V19JLUFz05w/SCGsxgsPCwcirN2CNjAFX9eo f2PWyD3/zvkUQ13YW7PXQJxUTx+WH/Lqpqp0822GHC8pVy6+2gsLOZ28pnbhVgGZ BwOy6xD7iKMQesifnWqNTYrwIBzU+7lQ7MSfhiWgwbzGgiAJDi7H3K1SAjt8uFSk gMPtLiVe+uxCTa4jov5M4FBqkqUo5g0Ag2JTf8tD -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:29 2026 by rpki-client